Ninite 7Zip Chrome JDK AdoptOpenJDK 8 Installer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Ninite 7Zip Chrome JDK AdoptOpenJDK 8 Installer.exe
Size 407KB
Sample260826-ja64pathnc
SHA256 4bc9f503a520e3a307cc50b456d983536806cea6c2b88efa85f032072770372b
MD5 9f17fa892353a6a05097ac5a3357a89d
SHA1 3ac7f07ee65faaaee5179c3554e5d38a0f4dffb8
SHA512 96789ff516ab0ba1a10b8a2eed827a249cda16571a1bb3279b9bd8ed7e8f49386e2ab661d3efc8ffcd7c08e995c820b671d7920a019e5ee7e293aa394029730c
SSDEEP 6144:RhuGbXZA2zNMPMPwVtiN44zAi5NAOig3TBrCZMszqLi7ksvmacmWnZ:DuypA2hESwGRwg3TBPi7BvmZmwZ
TLSH
T1DC94CF11BA85A433C1B305321B6DE22529BCBC315D258B6FB3D86F2C9E751C1B625BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ninite 7Zip Chrome JDK AdoptOpenJDK 8 Installer.exe

File Explorer

Ninite 7Zip Chrome JDK AdoptOpenJDK 8 Installer.exe

.exe 407KB

Ninite 7Zip Chrome JDK AdoptOpenJDK 8 Installer.exe

IMPHASH 0ba45f8e3256fff048470d02ee09aabb
SHA256 4bc9f503a520e3a307cc50b456d983536806cea6c2b88efa85f032072770372b
MD5 9f17fa892353a6a05097ac5a3357a89d
SHA1 3ac7f07ee65faaaee5179c3554e5d38a0f4dffb8
SHA512 96789ff516ab0ba1a10b8a2eed827a249cda16571a1bb3279b9bd8ed7e8f49386e2ab661d3efc8ffcd7c08e995c820b671d7920a019e5ee7e293aa394029730c
SSDEEP 6144:RhuGbXZA2zNMPMPwVtiN44zAi5NAOig3TBrCZMszqLi7ksvmacmWnZ:DuypA2hESwGRwg3TBPi7BvmZmwZ
TLSH
T1DC94CF11BA85A433C1B305321B6DE22529BCBC315D258B6FB3D86F2C9E751C1B625BB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

107834

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ninite\Output\pdbs\Release\FetchApps.pdb

kernel32

ReadFile CreateFileW GetFileSizeEx GetSystemTimeAsFileTime GetTickCount GetVersionExW GetProcAddress GetModuleHandleW SetFileTime GetStdHandle Sleep LoadLibraryW LocalFree FormatMessageW VirtualQuery SetUnhandledExceptionFilter EnterCriticalSection LeaveCriticalSection GetComputerNameW GetLocalTime InitializeCriticalSectionAndSpinCount DeleteCriticalSection CreateProcessW WaitForSingleObject GetExitCodeProcess GetPrivateProfileStringW SetEvent CreateEventW TerminateProcess CreateThread SetFilePointerEx RaiseException GetCommandLineW GetCurrentThreadId SetLastError FreeLibrary DecodePointer FlushFileBuffers WriteFile GetConsoleCP SetStdHandle CreateDirectoryW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetACP GetModuleHandleExW ExitProcess LoadLibraryExW RtlUnwind GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW UnhandledExceptionFilter GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW TlsFree WideCharToMultiByte GetConsoleMode MultiByteToWideChar GetLastError MoveFileExW FindClose FindNextFileW FindFirstFileW GetCurrentProcess RemoveDirectoryW DeleteFileW SetFileAttributesW GetFileAttributesW GetModuleFileNameW ExpandEnvironmentStringsW GetShortPathNameW GetTempPathW CloseHandle LocalAlloc GetProcessHeap TlsSetValue TlsGetValue TlsAlloc LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy FindResourceExW FindResourceW LoadResource LockResource SizeofResource InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer OutputDebugStringW IsDebuggerPresent WriteConsoleW

user32

GetParent GetClientRect GetWindowRect MapWindowPoints MonitorFromWindow GetWindowLongW GetWindow LoadImageW GetSystemMetrics SendMessageW SetWindowLongW ShowWindow SetWindowPos GetWindowTextLengthW GetWindowTextW GetDlgItem PostMessageW GetMonitorInfoW DestroyMenu CallWindowProcW LoadMenuW GetSubMenu CreateWindowExW LoadCursorW GetClassInfoExW RegisterClassExW UnregisterClassW LoadStringW DialogBoxParamW PeekMessageW GetMessageW TranslateMessage DispatchMessageW DefWindowProcW TrackPopupMenu GetCursorPos SetForegroundWindow PostQuitMessage RegisterWindowMessageW EndDialog MessageBoxW WaitForInputIdle

gdi32

GetStockObject

advapi32

CheckTokenMembership GetLengthSid IsValidSid GetSidSubAuthority InitializeSid GetSidLengthRequired RegQueryValueExW RegCloseKey RegOpenKeyExW DeregisterEventSource RegisterEventSourceW StartServiceCtrlDispatcherW RegisterServiceCtrlHandlerExW SetServiceStatus ReportEventW CopySid

shell32

ShellExecuteW Shell_NotifyIconW CommandLineToArgvW

wintrust

WinVerifyTrust

crypt32

CryptMsgGetParam CertFindCertificateInStore CertGetNameStringW CertGetCertificateContextProperty CryptUnprotectData CryptMsgClose CertCloseStore CertFreeCertificateContext CertFreeCertificateChain CryptQueryObject

wininet

InternetConnectW HttpSendRequestW InternetOpenW InternetOpenUrlW InternetCloseHandle InternetCrackUrlW InternetQueryOptionW InternetSetOptionW HttpOpenRequestW InternetWriteFile InternetReadFile HttpQueryInfoW HttpEndRequestW HttpSendRequestExW

rpcrt4

UuidCreateSequential RpcStringFreeW UuidToStringW

urlmon

ObtainUserAgentString